3cd80e6edfb94c8165cba624dbec5682_JaffaCakes118

General

Target

3cd80e6edfb94c8165cba624dbec5682_JaffaCakes118
Size

1001KB
MD5

3cd80e6edfb94c8165cba624dbec5682
SHA1

8b41c6844cfbb330bbc5ad11e43018872374f7f3
SHA256

6d96252b3527aa78f9b0bc5d0106d4178d83ad22ad8a8e2bcef1c3feda90e26b
SHA512

1334b8822cf918dfbcc46b7d0a3e3f9b974680b4765d321f11661337693d420f056554f7a05cf0dee1814e811300faaa6967fe6266ba61ce4b79652bd194f782
SSDEEP

24576:6mTKikHAuR+FathyMgj+dcQUmGDmt58coctTEG:VIR4athxgj+duktycoctYG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cd80e6edfb94c8165cba624dbec5682_JaffaCakes118

Files

3cd80e6edfb94c8165cba624dbec5682_JaffaCakes118
.exe windows:4 windows x86 arch:x86

831d5ca10ceb4d6df361558205b3d5f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
CreateEventA
lstrcpyA
LocalAlloc
GetCommandLineA
Sleep
lstrlenA
CloseHandle
GetLastError
LocalFree
GetTickCount
lstrcatA
GlobalAlloc
GlobalFree
FreeLibrary

user32

ScreenToClient
SetWindowTextA
LoadIconA
SetFocus
BeginPaint
GetSysColor
DispatchMessageA
GetClientRect
MessageBoxA
DestroyWindow
EndDialog
GetWindowRect
DialogBoxParamA
DefWindowProcA
TranslateMessage
ShowWindow
CreateWindowExA
PostQuitMessage
GetMessageA
GetFocus
EndPaint

gdi32

DeleteObject
GetBkColor
CreateSolidBrush
SelectObject
LineTo
GetTextExtentPoint32A

msvcrt

__setusermatherr
_controlfp
_XcptFilter
_exit
wcschr
_acmdln
_except_handler3
_initterm
_c_exit
wcslen
__p__fmode
__getmainargs
__p__commode
__CxxFrameHandler
rand

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 431B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 989KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

831d5ca10ceb4d6df361558205b3d5f5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msvcrt

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 2KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 431B

.rsrc Size: 989KB - Virtual size: 2.8MB

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 2KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 431B

.rsrc
Size: 989KB - Virtual size: 2.8MB